Glossary
EDR Explained: Endpoint Detection and Response
EDR watches what actually happens on laptops and servers, records it, and lets you detect and shut down…
All articles
Browse by category
Glossary
Glossary
Email Security: Phishing, Spoofing and DMARC
Email security is the set of controls that stop phishing, impersonation and malicious attachments from reaching your team,…
Glossary
DAST Explained: Dynamic Application Security Testing
DAST tests a running application from the outside, sending real requests the way an attacker would, to find…
Glossary
ISO 27001 Annex A Controls Explained
Annex A is the catalogue of 93 security controls published with ISO 27001. You select from it based…
Glossary
DPDP Act: Rules, Deadlines and Penalties
The DPDP Act is India’s data protection law. It sets the rules for how organisations may collect, use…
Glossary
Risk Treatment Plan: Options and What to Record
A risk treatment plan records what you decided to do about each risk you identified, which controls implement…
Glossary
Risk Assessment: Steps and the Risk Register
A risk assessment is the process of working out what could go wrong with the information you hold,…
Glossary
Statement of Applicability: What Auditors Check
The Statement of Applicability is the document listing every Annex A control, whether it applies to your organisation,…
Glossary
ISMS Explained: The System ISO 27001 Certifies
An ISMS is the set of policies, processes and records an organisation uses to manage information security decisions,…